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DETAILED ACTION 
Information Disclosure Statement 

The listing of references in the specification is not a proper information disclosure 
statement. 37 CFR 1.98(b) requires a list of all patents, publications, or other 
information submitted for consideration by the Office, and MPEP § 609 A(1) states, "the 
list may not be incorporated into the specification but must be submitted in a separate 
paper." Therefore, unless the references have been cited by the examiner on form 
PTO-892, they have not been considered. 

Claim Objections 

Claim 1 is objected to because of the following informalities: "(multiplicative)", 
"(the order of G)", "(where a..)". The parenthesis should be removed for the limitation to 
be given patentable weight. Appropriate correction is required. 

Claim 2 is objected to because of the following informalities: "(q is a prime 
factor...)", "(10 k1+k2 ... <p)", "(|ai| = ki , |a 2 | = k 2 )", "(|m| = k 3 where...)". The parenthesis 
should be removed for the limitation to be given patentable weight. Appropriate 
correction is required. 

Claim 6 is objected to because of the following informalities: "(symmetric 
cryptographic function E and key data K" (page 39, line 4). 

Claim 18 is objected to because of the following informalities: "E pk (.) : 
(asymmetric cryptography) encipher function" (page 47, line 10). The meaning of E pk (.) 
is not clear. 

Please note that this is not a complete list of occurrences. 
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Claim Rejections - 35 USC §112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Claim 14 is rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim 14 recites the limitation "transmitting the ciphertext (m, u 2 , v, C)" in page 

45, line 16. There is insufficient antecedent basis for this limitation in the claim. 

Claim 18 is rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim 18 recites the limitation "where the group G is a partial group of the group 
G"' in page 47, line 1 1 . There is insufficient antecedent basis for this limitation in the 
claim. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-22 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Cramer et al. (US Patent Number: 6,697,488). 

Regarding claim 1, Cramer et al. teach a public-key cryptographic scheme 
comprising: a key generation step of generating a secret-key: 

- xi, x 2 , yn, yi2, y2i, y22, z e Z q (column 7, lines 10-19), and 

- a public-key: 

o G, G': finite (multiplicative) group G c G\ 

o q: prime number (the order of G), 

o gi,g2 e G (column 6, lines 65-67, column 7, lines 1-10), 

o c= gi A xi g 2 A x 2 , di= gi A yn g 2 A yi2, d 2 = gi A y 2 i g2 A y22, h= gi A z, 

o tt : X<[ x X2 x M G' : one-to-one mapping 

o tt" 1 : Im(-rr) — > X1 x X 2 x M (column 7, lines 20-27) 

- where the group G is a partial group of the group G\ Xi and X 2 are an infinite 
set of positive integers which satisfy: ch || a 2 <q (for every ai e Xi , for every q 2 
e X 2 ) where M is a plaintext space; 
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- a cipher-text generation and transmission step of selecting random numbers 
Ch g Xi ( a 2 e X 2 , r e Z q for a plaintext m (m g M), calculating: Ui=gi A r, u 2 =g2 A r, 
e=TT(ai, a 2 , m)h r , v=g/ ai c r di A ar d 2 A mr (column 7, lines 55-67, column 8, 
lines 1-22) where a = ai || a 2 and transmitting (ui, u 2 , e, v) as a ciphertext 
(column 8, lines 24-35); and 

- a ciphertext reception and decipher step of calculating from the received 
ciphertext and by using the secret key, Ch\ a 2 \ rrV (a/e Xi, ci 2 'gX 2 , m'e M) 
which satisfy: tt (ai\ a 2 \ m') = e/(ui A z) (column 8, lines 36-67, column 9, lines 
1-67, column 10, lines 1-67) 

- and if the following is satisfied: 
(gi A ai')(ui A (xi+ a'yii+m'y2i))(u 2 A (x 2 + a , yi2+m I y22))=v 

outputting m' as the deciphered results (where a' = || a 2 \ whereas if not 
satisfied, outputting as the decipher results the effect that the received cipher- 
text is rejected (column 8, lines 36-67). 
Cramer et al. disclose generating a secret-key using five exponent numbers (xi, 
x 2 , yi, y2, z e Z q ), generating a public-key, and transmitting a cipher-text (ui, u 2 , e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 
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Regarding claim 2, Cramer et al. teach a public-key cryptographic scheme 
comprising: a key generation step of generating a secret-key: 

- xi, x 2 , yn, yi2, y2i, y22, z e Zq (column 7, lines 10-19), and 

- a public-key: 

o p, q: prime number (q is a prime factor of p-1), 
o gi,g2 e Z p : ord p (gi)= ord p (g 2 ) = q (column 6, lines 65-67, column 7, 
lines 1-10), 

o c= gi A Xi g 2 A x 2 mod p, di= gi A yn g 2 A yi2 mod p, d 2 = gi A y 2 i g2 A y22 mod p, 
h= gi A zmod p, 

o ki , k 2 , k 3 : positive constant (10 k1+k2 < q, 10 k3 < q, io k1+k2+k3 < p) 
(column 7, lines 20-27) 

- a cipher-text generation and transmission step of selecting random numbers 
a = ch || a 2 (|ai| = ki , |a 2 | = k 2 ) for a plaintext m (|m| = k 3 where |x| is the 
number of digits of x), calculating: m = ot||K 

- selecting a random number r € Z q , calculating: 

ui= g/mod p, u 2 = g2 r mod p, e= m h r mod p, v=gi A cm c r di A ar d 2 A mr mod p 
and transmitting (ui, u 2 , e, v) as a ciphertext (column 8, lines 24-35); and 

- a ciphertext reception and decipher step of calculating from the received 
ciphertext and by using the secret key, ai\ a 2 \ nY (|ai'|=ki , |a 2 '| = k 2 , |m'|= k 3 ) 
which satisfy: ai'Ha^Hm 9 = e/(ui A z) mod p (column 8, lines 36-67, column 

9, lines 1-67, column 10, lines 1-67) 
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- and if the following is satisfied: 

(9i A ai , )(ui A (x 1 + a , yn + m , y 2 i))(U2 A (x2+ a'yi2 + mV22))sv (mod p) 
outputting m' as the deciphered results (where a' = aT || a 2 \ whereas if not 
satisfied, outputting as the decipher results the effect that the received cipher- 
text is rejected (column 8, lines 36-67). 
Cramer et al. disclose generating a secret-key using five exponent numbers (xi, 
X2, yi, y 2 , z e Z q ), generating a public-key, and transmitting a cipher-text (ui, U2, e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 

Regarding claim 3, Cramer et al. do not disclose expressly wherein the public- 
key is generated by a receiver and is made public. However, Examiner takes Official 
Notice that having a receiver generating a public-key and making it public is 
conventional and well known. Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to have a receiver generate a 
public-key and make it public since Examiner takes Official Notice that having a receiver 
generating a public-key and making it public is conventional and well known. 
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Regarding claim 4, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers aieXi, a 2 eX 2 , and reZ q are selected beforehand and the 
following is calculated and stored beforehand: Ui=g/, u 2 =g2 r , h r , g^ch c r di A ar (column 
7, lines 40-67, column 8, lines 1-22). 

Regarding claim 5, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers cm, a 2 (|ai|= ki , |a 2 |= k 2 ) are selected beforehand and the 
following is calculated and stored beforehand: Ui=gi r mod p, u 2 =g 2 r mod p, h r mod p, 
gi A ai c r di A ar mod p (column 7, lines 40-67, column 8, lines 1-22). 

Regarding claim 6, Cramer et al. teach a cryptographic communication method 
comprising: a key generation step of generating a secret-key: 

- xi, x 2 , yn, y i2 , y 2i , y 22 , z € Z q (column 7, lines 10-19), and 

- a public-key: 

o G, G': finite (multiplicative) group G c G\ 

o q: prime number (the order of G), 

o gi,g 2 € G (column 6, lines 65-67, column 7, lines 1-10), 

o c= gi A Xi g 2 A x 2l di= gi A yn g 2 A yi 2 , d 2 = gi A y 2 i g2 A y22, h= gi A z, 

o tt : Xi x X 2 x M — ► G' : one-to-one mapping 

o tt" 1 : Im(TT) ^X^x X 2 x M (column 7, lines 20-27) 

o E : symmetric encipher function (column 12, lines 1-35) 

- where the group G is a partial group of the group G\ Xi and X2 are an infinite 
set of positive integers which satisfy: ai || a 2 <q (for every ai e Xi , for every 02 
g X 2 ) where M is a plaintext space; 
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- a cipher-text generation and transmission step of selecting random numbers 
ai € Xi , a 2 e X 2 , r e Z q for key data K (K € M), calculating: Ui=gi A r, u 2 =g2 A r, 
e=Tr(ai, a 2 , K)h r , v=gi A ai c r di A ar d 2 A Kr (column 7, lines 55-67, column 8, 
lines 1-22) where a = ai || a 2 , generating a ciphertext C of transmission data 
m by: C = E K (m) (column 12, lines 1-35) by using a symmetric cryptographic 
function E and key data K, and transmitting (ui, u 2 , e, v, C) as the ciphertext 
(column 8, lines 24-35); and 

- a ciphertext reception and decipher step of calculating from the received 
ciphertext and by using the secret key, ch', a 2 ', K' (a-Te Xi, a 2 'eX 2 , K'e M) 
which satisfy: tt (ai'|| a 2 '|| K') = e/(ui A z) (column 8, lines 36-67, column 9,lines 
1-67, column 10, lines 1-67) 

- and if the following is satisfied: 

(g 1 A ai')(ui A (x 1 + a'yn+K'y 2 i))(u 2 A (x 2 + a'y 12 +K'y 22 ))=v where a' = oV || a 2 \ 
executing a decipher process by: m=D K ( C) outputting deciphered results, 
whereas if not satisfied, outputting as the decipher results the effect that the 
received cipher- text is rejected (column 8, lines 36-67). 
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Cramer et al. disclose generating a secret-key using five exponent numbers (x 1( 
X2. yi. y2- z e Z q ), generating a public-key, and transmitting a cipher-text (ui, u 2 , e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 

Regarding claim 7, Cramer et al. teach wherein the ciphertext C is generated by: 
C = E«( f (01,02) 1 1 m) by using a symmetric cryptographic function E (column 12, lines 
1-35), the key data K and a publicized proper function f, it is checked whether the 
following is satisfied: 

(g 1 A o i ')(ui A (x 1 + a'y 1 i+K , y 2 i))(u2 A (x2+ a'yi 2 +K'y22))=v 

f(a 1 \a2 , ) = [D K '(C)] K 

where f outputs a value of k bits and [x] k indicates the upper k bits of x, and if the 
check passes, a decipher process is executed by: m= [D K ( C )]" K where [x]" k indicates a 
bit train with the upper k bits of x being removed (column 8, lines 36-67, column 12, 
lines 1-35). 

Regarding claim 8, Cramer et al. teach a cryptographic communication method 
comprising: a key generation step of generating a secret-key: 

- xi, x 2 , yn, yi2, y 2 i, y 2 2, z e Z q (column 7, lines 10-19), and 

- a public-key: ' 



1 
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o p, q: prime number (q is a prime factor of p-1), 
o gi,g 2 € Z p : ord p (gi)= ord p (g 2 ) = q (column 6, lines 65-67, column 7, 
lines 1-10), 

o c= g^xi g 2 A x 2 mod p, di= gi A yn g 2 A yi2mod p, d 2 = gi A y 2i g 2 A y 22 mod p, 
h= gi A z mod p, 

o ki , k 2 , k 3 : positive constant (10 k1+k2 < q, 10 k3 < q, 10 k1+k2+k3 < p) 

(column 7, lines 20-27) 
o E : symmetric encipher function (column 12, lines 1-35) 

- a cipher-text generation and transmission step of selecting random numbers 
a = cm || a 2 (|ai| = ki , |a 2 | = k 2 ) for key data K (|K| = k 3 where |x| is the number 
of digits of x), calculating m = a||K 

- selecting a random number r e Z q> calculating: 

Ui=gi r mod p, u 2 = g 2 r mod p, e= m h r mod p, v=g 1 A ch c r di A ar d 2 A Kr mod p 
and generating a ciphertext C of transmission data by: C = E K (m) (column 12, 
lines 1-35) by using a symmetric cryptographic function E and the key data K, 
and transmitting (ui, u 2 , e, v, C) as the ciphertext (column 8, lines 24-35); and 

- a ciphertext reception and decipher step of calculating from the received 
ciphertext and by using the secret key, cd\ a 2 \ K' (|ai'|=ki, |a2|=k 2j |K'|= k 3 ) 
which satisfy: ai'|| a 2 '|| K' = e/(ui A z) mod p (column 8, lines 36-67, column 
9, lines 1-67, column 10, lines 1-67) 
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- and if the following is satisfied: 

(gi A ai')(ui A (x 1 + a , yii+K , y2i))(u 2 A (x 2 + a'yi2+K'y22))=v (mod p) where a' = ch' || 
02', executing a decipher process by: m=D K ( C) outputting deciphered results, 
whereas if not satisfied, outputting as the decipher results the effect that the 
received cipher- text is rejected (column 8, lines 36-67). 
Cramer et al. disclose generating a secret-key using five exponent numbers (xi, 
X2, yi» y 2 , z e Z q ), generating a public-key, and transmitting a cipher-text (ui, u 2 , e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 

Regarding claim 9, Cramer et al. teach wherein the ciphertext C is generated by: 
C = E K ( f (ai,a 2 ) | | m) by using a symmetric cryptographic function E (column 12, lines 
1-35), the key data K and a publicized proper function f, it is checked whether the 
following is satisfied: 

(gi A ai')(u 1 A (x 1 + a , yi 1 +K , y 2 i))(u 2 A (x 2 + a'yi 2 +K'y 22 ))=v ( mo d p), 
f(ai\a 2 ) = [D K '(C)] k 
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where f outputs a value of k bits and [x] k indicates the upper k bits of x, and if the 
check passes, a decipher process is executed by: m= [D K ( C )]" K where [x]" k indicates a 
bit train with the upper k bits of x being removed (column 8, lines 36-67, column 12, 
lines 1-35). 

Regarding claim 10, Cramer et al. do not disclose expressly wherein the public- 
key is generated by a receiver and is made public. However, Examiner takes Official 
Notice that having a receiver generating a public-key and making it public is 
conventional and well known. Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to have a receiver generate a 
public-key and make it public since Examiner takes Official Notice that having a receiver 
generating a public-key and making it public is conventional and well known. 

Regarding claim 11, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers ch, a 2 (aieX^ a 2 eX 2 ) and reZq are selected beforehand and 
the following is calculated and stored beforehand: Ui=g/, u 2 =g 2 r , h r , g^ai c r di A ar 
(column 7, lines 40-67, column 8, lines 1-22). 

Regarding claim 12, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers Oi, a 2 (|ai|= ki , |a 2 |- k 2 ) and reZq are selected beforehand 
and the following is calculated and stored beforehand: Ui=g/mod p, u 2 =g 2 r mod p, 
h r mod p, gi A ai c r di A ar mod p (column 7, lines 40-67, column 8, lines 1-22). 

Regarding claim 13, Cramer et al. teach a cryptographic communication method 
comprising: a key generation step of generating a secret-key: 

- x 1t x 2 , yi, y 2 , z € Zq (column 7, lines 10-19), and 
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- a public-key: 

o G, G': finite (multiplicative) group G c G', 

o q: prime number (the order of G), 

o gi,g 2 e G (column 6, lines 65-67, column 7, lines 1-10), 

o c= g/xi g 2 A x 2 , d = g t A yi g 2 A y 2 , h= gi z , 

o Tr : X-i x X 2 x M — ► Dom(E) : one-to-one mapping (Dom(E) is the 

domain of the function E) 
o it" 1 : Im(TT) — X : x X 2 x M (column 7, lines 20-27) 
o H : hash function (column 12, lines 1-35) 
o E : symmetric encipher function (column 12, lines 1-35) 

- where the group G is a partial group of the group G', X^ and X 2 are an infinite 
set of positive integers which satisfy: ai || a 2 <q (for every ai e Xt , for every a 2 
e X 2 ) where M is a plaintext space; 

- a cipher-text generation and transmission step of selecting random numbers 
aieXi,a 2 6X 2 ,reZ q , calculating: Ui=gi r , u 2 =g 2 r , v=gi A ai c r d ar , K = H(h r ) 
(column 7, lines 55-67, column 8, lines 1-22) where a = cm || a 2 , generating a 
ciphertext C of transmission data m by: C = Ek(tt(cii, a 2 , m)) (column 12, lines 
1-35) by using a symmetric cryptographic function E; and transmitting (ui, u 2 , 
v, C) as the ciphertext (column 8, lines 24-35); and 
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- a ciphertext reception and decipher step of calculating K' = H(ui z ) by using 
the secret key, calculating from the received ciphertext, Ch\ 02', (where 

ai'e X1, a 2 GX 2 ) which satisfy: 71(01', a 2 ', m') = D K ( C ) (column 8, lines 36-67, 
column 9, lines 1-67, column 10, lines 1-67) 

- and if the following is satisfied: 

(gi A ch')(ui A (x 1 + a'yi))(u 2 A (x 2 + a'y2))=v, where a' = cm' || a 2 \ outputting m' as 
the deciphered results, whereas if not satisfied, outputting as the decipher 
results the effect that the received cipher- text is rejected (column 8, lines 36- 
67). 

Cramer et al. disclose generating a secret-key using five exponent numbers (xi, 
x 2 , yi, y 2l z e Z q ), generating a public-key, and transmitting a cipher-text (ui, u 2 , e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 

Regarding claim 14, Cramer et al. teach a cryptographic communication method 
comprising: a key generation step of generating a secret-key: 

- X1, x 2 , yi, y 2 , z e Z q (column 7, lines 10-19), and 

- a public-key: 

o p, q: prime number (q is a prime factor of p-1), 
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o gi,g 2 € Z p : ord p (gi)= ord p (g 2 ) = q (column 6, lines 65-67, column 7, 
lines 1-10), 

o c= gi A Xi g 2 A x 2 mod p, d= gi A yi g 2 A y 2 mod p, h= gi z mod p, 

o ki.k2.k3: positive constant (10 k1+k2 < q, 10 k3 < q, io k1+k2+k3 < p) 

(column 7, lines 20-27) 
o H : hash function 

o E : symmetric encipher function (the domain of E is all positive 
integers) 

- a cipher-text generation and transmission step of selecting random numbers 
a = ai || a 2 (|ai| = ki , |a 2 | = k 2 , where |xj is the number of digits of x), 

- selecting a random number r € Z q , calculating: 

ui= g/ mod p, u 2 = g 2 r mod p, v=gi A ai c r d ar mod p, K = H(h r mod p) 

- transmitting the ciphertext (ui, u 2 , v, C) (column 8, lines 24-35); 

- generating a ciphertext C of transmission data m by: C = E K (ai||a 2 ||m) 
(column 12, lines 1-35) by using a symmetric cryptographic function, and 

- transmitting (ui, u 2 , v, C) as the ciphertext (column 8, lines 24-35); 

a ciphertext reception and decipher step of calculating K' = H(ui z mod p) by 
using the secret key, calculating from the received ciphertext, a-i', a 2 ' (|ai'|=ki 
, |a 2 '| = k 2 ) which satisfy: ai'Hcfc'llm' = D K ( C ) 
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- and if the following is satisfied: 

(gi A aV)(ui A (xi+ a'yi))(u 2 A (x 2 + a'y 2 ))=v (mod p) 

outputting m' as the deciphered results (where a 1 = ch' || 02', whereas if not 
satisfied, outputting as the decipher results the effect that the received cipher- 
text is rejected (column 8, lines 36-67). 
Cramer et al. disclose generating a secret-key using five exponent numbers (xi, 
X2, yi, y2, z e Z q ), generating a public-key, and transmitting a cipher-text (ui, U2, e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 

Regarding claim 15, Cramer et al. do not disclose expressly wherein the public- 
key is generated by a receiver and is made public. However, Examiner takes Official 
Notice that having a receiver generating a public-key and making it public is 
conventional and well known. Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to have a receiver generate a 
public-key and make it public since Examiner takes Official Notice that having a receiver 
generating a public-key and making it public is conventional and well known. 
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Regarding claim 16, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers Ch , a 2 (aieXi, a 2 eX 2 ) and reZ q are selected beforehand and 
the u 1f u 2 , e, and v are calculated and stored beforehand (column 7, lines 40-67, column 
8, lines 1-22). 

Regarding claim 17, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers ai , a 2 (|ai|= ki, |a 2 | = k 2 ), and reZqare selected beforehand 
and the ui, u 2 , e, and v are calculated and stored beforehand (column 7, lines 40-67, 
column 8, lines 1-22). 

Regarding claim 18, Cramer et al. teach a cryptographic communication method 
comprising: a key generation step of generating a secret-key: 

- xi, x 2 , yi, y 2 e Z q (column 7, lines 10-19), 

- sk : (asymmetric cryptography) decipher key 

- and a public-key: 

o G : finite (multiplicative) group 

o q: prime number (the order of G), 

o gi,g 2 e G (column 6, lines 65-67, column 7, lines 1-10), 

o c= gi A X! g 2 A x 2 , d= g^yi g 2 A y 2 , 

o tt : Xi x X 2 x M — ► Dom (E) : one-to-one mapping, (Dom (E) is the 

domain of the function E) 
o tt 1 : Im(TT) -» Xi x X 2 x M (column 7, lines 20-27) 
o E pk (.) : (asymmetric cryptography) encipher function (column 12, lines 

1-35) 
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- where the group G is a partial group of the group G', X, and X 2 are an infinite 
set of positive integers which satisfy: ai || a 2 <q (for every ch e Xi , for every a 2 
e X 2 ) where M is a plaintext space; 

- a cipher-text generation and transmission step of selecting random numbers 
ai e Xt , a 2 e X 2 , r € Z q , calculating: Ui=gi r , u 2 =g 2 r , v=g! A ai c r d ar (column 7, 
lines 55-67, column 8, lines 1-22) where a = ai || a 2 , generating a ciphertext 
C of transmission data m by: e = E pk (7i(ai,a 2 ,m)) (column 12, lines 1-35) by 
using an asymmetric cryptographic function E pk , and transmitting (ui, u 2> e, v) 
as the ciphertext (column 8, lines 24-35); and 

- a ciphertext reception and decipher step of calculating from the received 
ciphertext and by using the secret key, ai\ a 2 ', m' (ch'e Xi, a 2 'eX 2 , m'e M) 
which satisfy: tt (ai', a 2 ', m') = D S k(e) (column 8, lines 36-67, column 9,lines 1- 
67, column 10, lines 1-67) 

- and if the following is satisfied: 
(g 1 A a 1 ')(u 1 A (x 1 + a'yi))(u 2 A (x 2 + a'y 2 ))=v 

- where a' = ch' || a 2 ' 

- outputting m' as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received ciphertext is rejected (column 
8, lines 36-67). 
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Cramer et al. disclose generating a secret-key using five exponent numbers (xi, 
x 2 , yi, Y2, z e Z q ), generating a public-key, and transmitting a cipher-text (ui, u 2 , e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 

Regarding claim 19, Cramer et al. teach a cryptographic communication method 
comprising: a key generation step of generating a secret-key: 

- Xl x 2 , yi, y 2 e Z q (column 7, lines 10-19), 

- sk : (asymmetric cryptography) decipher key, and 

- a public-key: 

o p, q: prime number (q is a prime factor of p-1), 
o gi,g 2 e Z p : ord p (gi)= ord p (g 2 ) = q (column 6, lines 65-67, column 7, 
lines 1-10), 

o c= gi A Xi g 2 A x 2 mod p, d= gi A yi g 2 A y 2 mod p, 
o ki , k 2 : positive constant (10 k1+k2 < q) (column 7, lines 20-27) 
o E P k(.) : (asymmetric cryptography) encipher function (column 12, lines 
1-35) 
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- a cipher-text generation and transmission step of selecting random numbers 
a = ai || a 2 (|ai| = ki , |a 2 | = k 2 where |x| is the number of digits of x), selecting 
a random number r e Z q , calculating: 

Ui= g/ mod p, u 2 = g 2 r mod p, v=gi A ai c r d ar mod p 

- generating a ciphertext C of transmission data m (positive integer) by: 
e = E P k(a 1 ||a 2 ||m) (column 12, lines 1-35) 

by using the secret key, and transmitting (m, u 2l e, v) as the ciphertext 
(column 8, lines 24-35); and 

- a ciphertext reception and decipher step of calculating from the received 
ciphertext and by using the secret key, ch\ a 2 \ m' fla^ki, |a 2 '|=k2, m' is 
appositive integer) which satisfy: ai'|| a 2 '|| m' = D S k(e) (column 8, lines 36-67, 
column 9, lines 1-67, column 10, lines 1-67) 

- and if the following is satisfied: 
(gi A ai')(ui A (xi+ a'y 1 ))(u 2 A (x 2 + a'y2))=v (mod p) 

- where a' = ai' || a 2 

- outputting m' as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received cipher- text is rejected 
(column 8, lines 36-67). 
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Cramer et al. disclose generating a secret-key using five exponent numbers (xi, 
x 2 , yi, y2, z e Zq), generating a public-key, and transmitting a cipher-text (ui, u 2 , e, v). 
Furthermore, Cramer et al. teach generating extended private key and public key 
(column 4, lines 19-45). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to generate the secret key by 
modifying Cramer et al.'s generating step. One of ordinary skill in the art would have 
been motivated to do so to increase the security of the cryptographic scheme (Cramer 
et al., column 4, lines 19-67). 

Regarding claim 20, Cramer et al. do not disclose expressly wherein the public- ^ 
key is generated by a receiver and is made public. However, Examiner takes Official 
Notice that having a receiver generating a public-key and making it public is 
conventional and well known. Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to have a receiver generate a 
public-key and make it public since Examiner takes Official Notice that having a receiver 
generating a public-key and making it public is conventional and well known. 

Regarding claim 21, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers ai , a 2 (aieXi, a 2 eX 2 ) and reZ q are selected beforehand and 
the ui, u 2 , and v are calculated and stored beforehand (column 7, lines 40-67, column 8, 
lines 1-22). 
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Regarding claim 22, Cramer et al. teach wherein in said ciphertext transmission 
step, the random numbers ch , a 2 (|ai|= ki, |a 2 | = k 2 ), and reZ<,are selected beforehand 
and the Ui, u 2 , and v are calculated and stored beforehand (column 7, lines 40-67, 
column 8, lines 1-22). 
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Conclusion 



The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

US Patent Number: 6,081,598 to Dai, for "a cryptography system improves the 
decryption speed in the RSA algorithm by taking advantage of certain subgroups of Z n *. 
The cryptography system employs a new family of trapdoor permutations based on 
exponentiation in subgroups of Z n *". 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David G. Cervetti whose telephone number is (571) 272- 
5861 . The examiner can normally be reached on Monday-Friday 8:30 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on (571) 272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 
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